On Fri, Dec 01, 2000 at 01:50:40AM +1100, Anand Kumria wrote:
> I was wondering if there are any plans to get our a release of tcpdump
> and/or libpcap which contains the security fixes in place? Anyone
> downloading the source from the webpage will get versions with known
> exploits in them.

I suppose we could do an 0.5.3/3.5.3 with the security fixes.

> Also I am hoping that someone can update (in both packages) the
> config.guess and config.sub files (both from automake) which assist
> in platform detection. Linux hppa and arm need newer ones. When I had
> access to a HPUX box I recall a similiar prob. on those as well.
> 
> The support in the CVS version for TokenRing, FrameRelay (and ISDN?) 
> would be an added bonus too.

...as would everything else in the CVS version.  The question is how
many things from the CVS version we'd want to throw into 0.5.3/3.5.3;
for each of the changes, there's probably *somebody* out there who'd
vote for its inclusion, at which point we'd just be releasing 0.6/3.6,
but that'd probably take a fair bit of time to do, and, if one of the
goals is to release something with the security fixes, having that take
a fair bit of time is probably *not* a good idea.

> Also, is it expected that filtering works on the loopback device, e.g:
> 
> $ tcpdump -i lo port 80
> 
> $ tcpdump -d -i lo -s 99999 -x port 9884

It should work, in the version in CVS.
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to